 Teoderick Contreras
|
7b06780bfa
|
nexus_update
|
2025-02-24 11:09:58 +01:00 |
|
|
Teoderick Contreras
|
faf7f6115f
|
nexus_update
|
2025-02-24 11:08:05 +01:00 |
|
|
Bhavin Patel
|
c795cda6af
|
Merge pull request #3337 from splunk/cisco_ai_defense
Cisco AI Defense Alerts
v5.1.0
|
2025-02-20 15:34:10 -08:00 |
|
|
pyth0n1c
|
ec007d4a28
|
Merge branch 'develop' into cisco_ai_defense
|
2025-02-20 15:19:04 -08:00 |
|
|
pyth0n1c
|
0eb683084c
|
Merge pull request #3328 from splunk/8_million_requests
the day after 8 million requests
|
2025-02-20 15:18:45 -08:00 |
|
|
research-bot
|
ebdd770afd
|
udpating name
|
2025-02-20 15:08:25 -08:00 |
|
|
research-bot
|
d25d712781
|
updating detection
|
2025-02-20 15:07:29 -08:00 |
|
|
Bhavin Patel
|
49fa1c1900
|
Merge branch 'develop' into cisco_ai_defense
|
2025-02-20 15:02:29 -08:00 |
|
|
pyth0n1c
|
d77736f7e4
|
Update detect_web_access_to_decommissioned_s3_bucket.yml
fix tests key again
|
2025-02-20 14:57:35 -08:00 |
|
|
pyth0n1c
|
7104c5c84b
|
Update detect_dns_query_to_decommissioned_s3_bucket.yml
Fix bad alignment of tests section
|
2025-02-20 14:55:30 -08:00 |
|
|
Jose Enrique Hernandez
|
9428a91911
|
Merge branch 'develop' into 8_million_requests
|
2025-02-20 17:53:03 -05:00 |
|
|
research-bot
|
aba0bdc4d3
|
updating detection
|
2025-02-20 14:47:37 -08:00 |
|
|
research-bot
|
63facf9e78
|
updating detection
|
2025-02-20 14:47:35 -08:00 |
|
|
Jose Hernandez
|
36f3b6eb35
|
shipping as experimental
|
2025-02-20 17:11:38 -05:00 |
|
|
Jose Hernandez
|
441ba47f3d
|
fixing merge conflicts
|
2025-02-20 17:06:33 -05:00 |
|
|
Bhavin Patel
|
808a674768
|
Merge pull request #3350 from splunk/integration_fixes
Minor fixes for integration tests
|
2025-02-20 10:19:03 -08:00 |
|
|
Bhavin Patel
|
74c102b8a0
|
Update windows_service_created_with_suspicious_service_name.yml
|
2025-02-20 10:02:51 -08:00 |
|
|
Bhavin Patel
|
43b9a93839
|
user_id
|
2025-02-20 09:58:57 -08:00 |
|
|
Bhavin Patel
|
2eb0c4698a
|
revert date
|
2025-02-20 09:50:12 -08:00 |
|
|
research-bot
|
347caf1538
|
remove empty coloums
|
2025-02-20 09:04:20 -08:00 |
|
|
research-bot
|
ecf4948604
|
manual test
|
2025-02-20 08:52:07 -08:00 |
|
|
research-bot
|
bfd2b1c050
|
updating to user
|
2025-02-20 08:47:38 -08:00 |
|
|
research-bot
|
e6711e779a
|
updating spl
|
2025-02-19 17:06:11 -08:00 |
|
|
Bhavin Patel
|
405064ec97
|
Update windows_process_execution_in_temp_dir.yml
|
2025-02-19 16:31:14 -08:00 |
|
|
research-bot
|
dc9561dec9
|
udpating from integration test
|
2025-02-19 16:29:22 -08:00 |
|
|
pyth0n1c
|
7907bd82d8
|
remove lookup CSV that is not used
|
2025-02-19 14:51:59 -08:00 |
|
|
pyth0n1c
|
fde93c6d32
|
convert csv lookup to kvstore lookup.
Update references in description files
as well.
|
2025-02-19 14:50:53 -08:00 |
|
|
Bhavin Patel
|
bdb79594e5
|
Merge branch 'develop' into 8_million_requests
|
2025-02-19 13:57:40 -08:00 |
|
|
Bhavin Patel
|
32c10dea26
|
Merge pull request #3317 from nterl0k/nterl0k-t1569-windows-sus-services-lookup
Nterl0k - T1569 Windows Suspicious Services Lookup
|
2025-02-19 13:08:24 -08:00 |
|
|
Nasreddine Bencherchali
|
ea641c5f97
|
Merge branch 'develop' into nterl0k-t1569-windows-sus-services-lookup
|
2025-02-19 22:05:45 +01:00 |
|
|
Bhavin Patel
|
82bdfb3956
|
Merge pull request #3333 from nterl0k/nterl0k-t1546-compattelrunnner-abuse
Nterl0k - T1546 The curious case of CompatTelRunner and some sneaky persistence.
|
2025-02-19 12:49:50 -08:00 |
|
|
Bhavin Patel
|
e5f870a913
|
Merge pull request #3348 from splunk/update-exchange-macro
Update Exchange Macro
|
2025-02-19 12:40:48 -08:00 |
|
|
Bhavin Patel
|
86c6bbb464
|
Merge branch 'develop' into nterl0k-t1546-compattelrunnner-abuse
|
2025-02-19 12:39:03 -08:00 |
|
|
Steven Dick
|
fb4a5ea9f4
|
Update windows_suspicious_services.csv
nas comments
|
2025-02-19 15:29:33 -05:00 |
|
|
Nasreddine Bencherchali
|
d2ca0de2d7
|
Merge branch 'develop' into update-exchange-macro
|
2025-02-19 21:16:59 +01:00 |
|
|
pyth0n1c
|
7966993376
|
Merge pull request #3277 from splunk/new-rules
TR-3994 - Add Secure Endpoint Analytics
|
2025-02-19 12:12:05 -08:00 |
|
|
Nasreddine Bencherchali
|
7df0472037
|
update exchange macro
|
2025-02-19 21:11:52 +01:00 |
|
|
Bhavin Patel
|
d0b24c6581
|
Merge branch 'develop' into 8_million_requests
|
2025-02-19 12:00:47 -08:00 |
|
|
Nasreddine Bencherchali
|
dac07f62d0
|
Update windows_compatibility_telemetry_tampering_through_registry.yml
|
2025-02-19 20:59:45 +01:00 |
|
|
pyth0n1c
|
fe00a4bbb3
|
Update windows_cisco_secure_endpoint_related_service_stopped.yml
add missing "search" keyword which caused unit testing to fail.
|
2025-02-19 11:52:46 -08:00 |
|
|
Nasreddine Bencherchali
|
b19c6e67a6
|
Merge branch 'develop' into nterl0k-t1546-compattelrunnner-abuse
|
2025-02-19 20:48:28 +01:00 |
|
|
Nasreddine Bencherchali
|
5ff1deea69
|
Update windows_cisco_secure_endpoint_related_service_stopped.yml
|
2025-02-19 20:35:33 +01:00 |
|
|
pyth0n1c
|
58a6e70e77
|
Merge branch 'develop' into new-rules
|
2025-02-19 11:33:51 -08:00 |
|
|
Nasreddine Bencherchali
|
4f0bbc250f
|
Update windows_cisco_secure_endpoint_related_service_stopped.yml
|
2025-02-19 20:32:52 +01:00 |
|
|
Nasreddine Bencherchali
|
c47a2b85af
|
Update windows_cisco_secure_endpoint_related_service_stopped.yml
|
2025-02-19 20:31:55 +01:00 |
|
|
Steven Dick
|
e66e5e364c
|
Update windows_compatibility_telemetry_tampering_through_registry.yml
description updated
|
2025-02-19 14:26:38 -05:00 |
|
|
Steven Dick
|
4d04bccb69
|
Update detections/endpoint/windows_compatibility_telemetry_tampering_through_registry.yml
As you say
Co-authored-by: Nasreddine Bencherchali <monsteroffire2@gmail.com>
|
2025-02-19 14:24:38 -05:00 |
|
|
Bhavin Patel
|
292fba5f7f
|
Merge pull request #3347 from splunk/remove-uncomatible-ds
Remove Incompatible 4688 Data Sources
|
2025-02-19 11:17:51 -08:00 |
|
|
Bhavin Patel
|
b68524f194
|
Merge branch 'develop' into remove-uncomatible-ds
|
2025-02-19 11:16:33 -08:00 |
|
|
Bhavin Patel
|
5182ac3282
|
Merge pull request #3298 from nterl0k/nterl0k-t1567-o365-sus-file-exfil
Nterl0k - T1567 - Suspect File Exfiltration Behaviors
|
2025-02-19 11:10:14 -08:00 |
|